We are looking for an experienced IT Risk Manager with strong expertise in Cybersecurity, Vulnerability Management, Application Security, and Regulatory Compliance to join our growing team.

Key Responsibilities :

- Perform Vulnerability Assessment & Penetration Testing (VAPT) across applications, APIs, and infrastructure

- Drive vulnerability remediation and ensure closure within defined SLAs

- Participate in Change Management and conduct secure configuration reviews

- Manage Application & API Security Lifecycle (OWASP Top 10 & API Top 10)

- Conduct threat modeling, risk assessments, and vulnerability scans

- Lead and support security incident response and post-incident analysis

- Ensure compliance with RBI Cybersecurity Framework, ISO 27001, PCI DSS, and NIST standards

- Support audits, regulatory reviews, and security documentation

- Collaborate with Development, DevOps, Infrastructure, and Compliance teams to embed Security by Design principles

Required Skills & Expertise :

- Hands-on experience with VAPT tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, and Postman

- Strong understanding of OWASP Top 10, API Security, and Secure Coding Practices

- Experience conducting secure configuration reviews for firewalls, servers, endpoints, and API gateways

- Knowledge of OAuth 2.0, JWT, API Key Management, Authentication & Authorization mechanisms, and Rate Limiting

- Exposure to DevSecOps practices and security automation

- Experience in Security Incident Response using tools like Splunk and CrowdStrike

Preferred Qualifications :

- Certifications such as CEH or Ethical hacking experience, OSCP, CISSP, CISA, CRISC, Security+, or equivalent will be an advantage

- Experience in Banking, Financial Services, or FinTech environments preferred